Patent US5048087A successfully refreshed from Google Patents.
US5048087A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Key management for encrypted packet based networks
Assignee: RACAL-GUARDATA Inc
•
Filing: 1990-10-16
•
Granted: 1991-09-10
•
Expires: 2010-10-16
Abstract
Abstract In a packet based communication network 10, a key management center 20 is used to distribute cryptographic keys for either a switched virtual circuit or a permanent virtual circuit. The disclosed methods allow the key management center 20 to communicate directly with the data encryption/decryption devices (DE's) 14 even though they operate in a transparent mode (rather than a store and forward mode). This is accomplished by balancing link counters with calls to fictitious addresses and/or use of interrupt packets transferred between the DTE 12 and the DE 14. In permanent virtual circuits, the MAC of the last packet transmitted under the old cryptographic key is exchanged to synchronize the key change.
Inventors
- 👤 Nick G. Trbovich
- 👤 Thomas D. Campbell
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 12:40
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/083; H04L9/0891
Claims Analysis
Total Claims: 4
Claim 1
Independent Claim
150 words
In a packet switched network, a method for changing keys used for encrypted switched virtual circuit communication between a first Data Terminal Equipment (DTE) and a second DTE, said first and second DTE having an associated first and second encryption device, comprising the steps of: issuing a call request packet from said first DTE to said second DTE; intercepting said call request packet at said first encryption device and substituting a call request for a key management center; transferring a key from said key management center to said first DTE; balancing counters at a link associated with said first DTE and first encryption device using a dummy packet in order to make frame send and receive sequence numbers equal and packet send and receive sequence numbers equal; establishing a channel between said first and second data encrypters; and transferring a key from said first data encrypter to said second encrypter.
Claim 2
Dependent Claim
150 words
In a packet switched network, a method for changing keys used for encrypted switched virtual circuit communication between a first Data Terminal Equipment (DTE) and a second DTE, said first and second DTE having an associated first and second encryption device, comprising the steps of: issuing a call request packet from said first DTE to said second DTE; intercepting said call request packet at said first encryption device and substituting a call request for a key management center; transferring a key from said key management center to said first DTE; balancing counters at a link associated with said first DTE and first encryption device using a dummy packet in order to make frame send and receive sequence numbers equal and packet send and receive sequence numbers equal; establishing a channel between said first and second data encrypters; and transferring a key from said first data encrypter to said second encrypter.
Claim 3
Dependent Claim
211 words
In a packet switched network, method for changing keys used for encrypted permanent virtual circuit communication between a first Data Terminal Equipment (DTE) and a second DTE, said first and second DTE having an associated first and second encryption device, comprising the steps of: issuing a call request packet from a key management center to said first encryption device; issuing a call request packet from said key management center to said second encryption device; from said key management center, sending a stop packet flow message from said first DTE to said second DTE and obtaining a last MAC from said first data encryption device and transferring a new key to said first data encryption device; from said key management center, sending a stop packet flow message from said second DTE to said first DTE and obtaining a last MAC from said second data encryption device and transferring a new key to said first data encryption device; from said key management center, sending a restart packet flow message to restart packet flow between said first and second DTE; and balancing link counters at said first and second links by transmission of dummy packets in order to make frame send and receive sequence numbers equal and packet send and receive sequence numbers equal.
Claim 4
Dependent Claim
211 words
In a packet switched network, method for changing keys used for encrypted permanent virtual circuit communication between a first Data Terminal Equipment (DTE) and a second DTE, said first and second DTE having an associated first and second encryption device, comprising the steps of: issuing a call request packet from a key management center to said first encryption device; issuing a call request packet from said key management center to said second encryption device; from said key management center, sending a stop packet flow message from said first DTE to said second DTE and obtaining a last MAC from said first data encryption device and transferring a new key to said first data encryption device; from said key management center, sending a stop packet flow message from said second DTE to said first DTE and obtaining a last MAC from said second data encryption device and transferring a new key to said first data encryption device; from said key management center, sending a restart packet flow message to restart packet flow between said first and second DTE; and balancing link counters at said first and second links by transmission of dummy packets in order to make frame send and receive sequence numbers equal and packet send and receive sequence numbers equal.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1994-09-09 | 1995-03-11 | 1995-09-10 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1998-09-09 | 1999-03-11 | 1999-09-10 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2002-09-09 | 2003-03-11 | 2003-09-10 | $7700.00 | Window Closed / Lapsed |